The only practical way i've found so far to have an up to date live disk with security patches is to use something Debian/Ubuntu based with Refracta tools.

So for example you Install Linux Mint 18 to a hardrive, set it up exactly how you want it with all your drivers and the latest updates then install Refracta tools and convert your HDD install into a Live disk ISO.

Then every couple of weeks boot the hardrive and let Mint install all of the latest security updates , applications and browsers and then again convert it to to a new ISO and write it to USB.

It only takes 10 minutes for refracta tools to produce a new image but the downside is a large 2GB ISO , though a full desktop as a Live Image works a lot better than you may think apart from it chewing through ram.

donald wrote:A large step towards security is to disable javaScript
Personally i use the Pale Moon browser + an add-on called "js switch"
which has only one function (button)..to toggle javaScript on/off.

Been using some other toggler on Light and 64 bit., but no toggler on 32 bit. Just installed JsSw, so we're now on the same page. One other addon which had been using a while back, lost track of, and found recently is Disallow javascript on current tab. Does not easily show on addons search. Handy if absolutely cannot do without javascript for a certain site, by disallowing on all other tabs.